@napi-rs/snappy-darwin-arm64
Fastest Snappy compression library in Node.js
16
Versions
MIT
License
No
Install Scripts
Verified
Provenance
Supply chain provenance
Status for the latest visible version.
SLSA provenance attestation
npm registry signatures
gitHead linked
Maintainers
broooooklynforehalo
Keywords
snappysnapcompressioncompressnapi-rsNAPIN-APIRustNode-APInode-addonnode-addon-api
Accepted risks
Findings the reviewer chose to accept rather than block on.
| Source | Rule | Reason | Accepted by | When |
|---|---|---|---|---|
| provenance | publisher-changed | AI (provenance): Publisher changed to GitHub Actions CI/CD, consistent with napi-rs automated publishing. SLSA attestation confirms build integrity. Repository URL unchanged, pointing to original maintainer's repo. | ai | |
| publish-pattern | dormant-publish | AI (publish-pattern): Platform-specific sub-package with irregular publish cadence is expected. SLSA provenance attestation provides strong assurance against account takeover for this package. | ai | |
| npm-metadata | bundled-binaries | AI (npm-metadata): This package IS a native binary addon (.node file) — bundling the compiled binary is its entire purpose, backed by SLSA provenance attestation. | ai | |
| bogus-package | bogus-package | AI (bogus-package): Platform-specific napi-rs sub-packages legitimately have no deps and minimal READMEs; these are not spam indicators for this package type. | ai |